mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-07-29 05:56:17 +00:00
484 lines
13 KiB
JSON
484 lines
13 KiB
JSON
{
|
|
"id": "CVE-2022-21933",
|
|
"sourceIdentifier": "twcert@cert.org.tw",
|
|
"published": "2022-01-21T09:15:06.820",
|
|
"lastModified": "2023-07-24T13:53:02.023",
|
|
"vulnStatus": "Analyzed",
|
|
"cveTags": [],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt (SMI) to modify memory, resulting in arbitrary code execution for controlling the system or disrupting service."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "El dispositivo ASUS VivoMini/Mini PC presenta una vulnerabilidad de comprobaci\u00f3n de entrada inapropiada. Un atacante local con privilegios de sistema puede usar la interrupci\u00f3n de administraci\u00f3n del sistema (SMI) para modificar la memoria, resultando en una ejecuci\u00f3n de c\u00f3digo arbitrario para controlar el sistema o interrumpir el servicio"
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV31": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "3.1",
|
|
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
|
"attackVector": "LOCAL",
|
|
"attackComplexity": "LOW",
|
|
"privilegesRequired": "LOW",
|
|
"userInteraction": "NONE",
|
|
"scope": "UNCHANGED",
|
|
"confidentialityImpact": "HIGH",
|
|
"integrityImpact": "HIGH",
|
|
"availabilityImpact": "HIGH",
|
|
"baseScore": 7.8,
|
|
"baseSeverity": "HIGH"
|
|
},
|
|
"exploitabilityScore": 1.8,
|
|
"impactScore": 5.9
|
|
},
|
|
{
|
|
"source": "twcert@cert.org.tw",
|
|
"type": "Secondary",
|
|
"cvssData": {
|
|
"version": "3.1",
|
|
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
|
|
"attackVector": "LOCAL",
|
|
"attackComplexity": "LOW",
|
|
"privilegesRequired": "HIGH",
|
|
"userInteraction": "NONE",
|
|
"scope": "UNCHANGED",
|
|
"confidentialityImpact": "HIGH",
|
|
"integrityImpact": "HIGH",
|
|
"availabilityImpact": "HIGH",
|
|
"baseScore": 6.7,
|
|
"baseSeverity": "MEDIUM"
|
|
},
|
|
"exploitabilityScore": 0.8,
|
|
"impactScore": 5.9
|
|
}
|
|
],
|
|
"cvssMetricV2": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "2.0",
|
|
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
|
|
"accessVector": "LOCAL",
|
|
"accessComplexity": "LOW",
|
|
"authentication": "NONE",
|
|
"confidentialityImpact": "COMPLETE",
|
|
"integrityImpact": "COMPLETE",
|
|
"availabilityImpact": "COMPLETE",
|
|
"baseScore": 7.2
|
|
},
|
|
"baseSeverity": "HIGH",
|
|
"exploitabilityScore": 3.9,
|
|
"impactScore": 10.0,
|
|
"acInsufInfo": false,
|
|
"obtainAllPrivilege": false,
|
|
"obtainUserPrivilege": false,
|
|
"obtainOtherPrivilege": false,
|
|
"userInteractionRequired": false
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-787"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"source": "twcert@cert.org.tw",
|
|
"type": "Secondary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-20"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"operator": "AND",
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:asus:vc65-c1_firmware:*:*:*:*:*:*:*:*",
|
|
"versionEndExcluding": "1302",
|
|
"matchCriteriaId": "395B2D9B-6DFD-4AD2-BC1C-F028D9F09156"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:asus:vc65-c1:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "D95AA553-93DD-4B25-998D-1931984CAE43"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "AND",
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:asus:pb60v_firmware:*:*:*:*:*:*:*:*",
|
|
"versionEndExcluding": "1302",
|
|
"matchCriteriaId": "0160408D-702A-40C4-A708-577A2382061C"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:asus:pb60v:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "3819ED72-D8BA-475A-BC75-1AFDD32355CE"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "AND",
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:asus:pb60g_firmware:*:*:*:*:*:*:*:*",
|
|
"versionEndExcluding": "1302",
|
|
"matchCriteriaId": "45E296C4-7A32-4BC4-9F43-4D6967CC9E3D"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:asus:pb60g:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "8A9D7121-8D3E-4B28-8BAF-FD35DA75D52F"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "AND",
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:asus:pb60s_firmware:*:*:*:*:*:*:*:*",
|
|
"versionEndExcluding": "1302",
|
|
"matchCriteriaId": "0D8E824D-F3A6-4719-B2F9-6B48D081FD3D"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:asus:pb60s:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "42187AD8-D7C0-433C-9B15-8B34854F4E44"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "AND",
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:asus:pa90_firmware:*:*:*:*:*:*:*:*",
|
|
"versionEndExcluding": "1401",
|
|
"matchCriteriaId": "40112146-802E-462B-A549-F3D59B8C6A07"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:asus:pa90:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "4331D58D-60C8-4C8D-A56E-BC673265EAFB"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "AND",
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:asus:pb50_firmware:*:*:*:*:*:*:*:*",
|
|
"versionEndExcluding": "902",
|
|
"matchCriteriaId": "065CAC27-8EED-4CCA-B581-7DE18B5E3679"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:asus:pb50:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "0012812A-1DCE-40DD-8333-D0D3263D4037"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "AND",
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:asus:pb60_firmware:*:*:*:*:*:*:*:*",
|
|
"versionEndExcluding": "1502",
|
|
"matchCriteriaId": "D02742FD-6BE3-4168-93F8-D5D583EE16F9"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:asus:pb60:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "1A3DD60D-1F92-435D-AD01-3D3D97F4C9DF"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "AND",
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:asus:pb61v_firmware:*:*:*:*:*:*:*:*",
|
|
"versionEndExcluding": "601",
|
|
"matchCriteriaId": "2361CDED-64D2-49B7-85F7-A9E5E0D9648D"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:asus:pb61v:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "5401FCAE-BBA0-48AF-B41A-6AA56FD69C32"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "AND",
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:asus:ts10_firmware:*:*:*:*:*:*:*:*",
|
|
"versionEndExcluding": "609",
|
|
"matchCriteriaId": "C7D8ABFC-E97D-4534-A477-00C59CCFC4BD"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:asus:ts10:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "770CEBE0-41C1-4946-A0E5-38426B2E55AC"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "AND",
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:asus:pn40_firmware:*:*:*:*:*:*:*:*",
|
|
"versionEndExcluding": "2201",
|
|
"matchCriteriaId": "926B71C7-45C0-4070-BEAB-551896043C6E"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:asus:pn40:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "48A7EC77-C345-4976-8E71-D7D9EECCD8DC"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "AND",
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:asus:pn60_firmware:*:*:*:*:*:*:*:*",
|
|
"versionEndExcluding": "808",
|
|
"matchCriteriaId": "1C8E41C0-87D8-4E5E-A8A8-F4ED6935C283"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:asus:pn60:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "9D15F380-7802-4A8E-BD79-68BC682C6E15"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "AND",
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:asus:pn30_firmware:*:*:*:*:*:*:*:*",
|
|
"versionEndExcluding": "320",
|
|
"matchCriteriaId": "48B92D16-649E-4565-B488-EE9081C2DE0E"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:asus:pn30:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "4C3C527A-4216-4755-B01D-E9ED1C1E7DB7"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "AND",
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:asus:un65u_firmware:*:*:*:*:*:*:*:*",
|
|
"versionEndExcluding": "618",
|
|
"matchCriteriaId": "D99FD9A8-B2D5-4CEC-8610-D0172EF5D9FA"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:asus:un65u:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "A7A7D92E-2D8E-4CF5-BA4C-2AED0946F6FF"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "https://www.twcert.org.tw/tw/cp-132-5547-34bc4-1.html",
|
|
"source": "twcert@cert.org.tw",
|
|
"tags": [
|
|
"Third Party Advisory"
|
|
]
|
|
}
|
|
]
|
|
} |